$ rpki-client -vvf repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.mft File: 11489A5805B7FE2710AE32C3077C3450579D1288.mft (raw, json) Hash identifier: xa/qdSy+5L35DCqgV7Vck+YzwOWTiBMehVyxtI/Uuds= Subject key identifier: 5E:67:B9:50:D0:13:EB:D5:FD:0E:53:F8:79:DB:E1:A3:49:1B:AA:B4 Authority key identifier: 11:48:9A:58:05:B7:FE:27:10:AE:32:C3:07:7C:34:50:57:9D:12:88 Certificate issuer: /CN=11489A5805B7FE2710AE32C3077C3450579D1288 Certificate serial: 2FDA70ED3B9E8AFB76E788BE70424375ABB6219F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11489A5805B7FE2710AE32C3077C3450579D1288.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.mft Manifest number: 016E Signing time: Wed 25 Mar 2026 19:42:03 +0000 Manifest this update: Wed 25 Mar 2026 19:37:03 +0000 Manifest next update: Sat 28 Mar 2026 22:44:03 +0000 Files and hashes: 1: 3130332e3131332e32362e302f32342d3234203d3e20313337333339.roa (hash: 96bScFlvdzCB0qXA/HCwI1sZDRYZx3jWpR+NJxZy45w=) 2: 11489A5805B7FE2710AE32C3077C3450579D1288.crl (hash: /MhhJLtPsuuhm6MBYO/xBvWe/XLAcwvrHX2HmhxQrSc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.crl rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11489A5805B7FE2710AE32C3077C3450579D1288.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:da:70:ed:3b:9e:8a:fb:76:e7:88:be:70:42:43:75:ab:b6:21:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11489A5805B7FE2710AE32C3077C3450579D1288 Validity Not Before: Mar 25 19:37:03 2026 GMT Not After : Mar 28 22:44:03 2026 GMT Subject: CN=5E67B950D013EBD5FD0E53F879DBE1A3491BAAB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f5:c3:78:06:8a:3e:96:c7:ec:01:d0:ee:43: 48:a6:e8:7b:6b:ce:9d:93:bc:e2:5c:e1:a1:33:8a: 38:f5:6a:45:82:c9:94:55:af:7d:9f:35:0c:79:ca: 77:f9:cb:62:b9:ac:0e:92:aa:06:85:af:74:3e:d3: 8f:85:2a:5d:70:c6:b4:9d:0a:6f:d0:83:b4:4d:a5: 82:35:87:71:6c:5a:f9:e3:cc:a8:22:8c:bc:19:8d: dd:c3:70:c3:d6:93:e6:3d:53:b6:e4:d4:ae:f3:e3: dc:d8:f6:e7:0c:05:52:72:16:9b:a4:25:c5:30:4e: 8e:b1:b6:d0:e8:e7:08:e5:d4:99:54:dd:9e:9e:e6: 45:30:2c:5e:0c:70:03:fb:cf:42:58:5c:d0:f9:07: 83:ff:35:81:d6:6a:14:b7:b1:1b:37:46:3c:a0:6c: da:cf:36:c2:4a:54:87:f6:79:27:be:e7:8f:e1:7d: d2:f5:3e:e6:6f:a7:5f:e0:7a:84:74:12:57:43:ba: 47:f2:96:ed:2b:99:ec:2e:31:8a:0b:46:45:1f:24: 10:19:e3:e7:2f:8e:71:6e:32:0e:31:a5:04:1c:2a: ff:09:ab:d8:d4:9a:85:54:25:af:5d:7e:a2:64:4a: 3c:27:08:20:56:bf:cb:02:92:14:70:c1:7b:da:8a: aa:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:67:B9:50:D0:13:EB:D5:FD:0E:53:F8:79:DB:E1:A3:49:1B:AA:B4 X509v3 Authority Key Identifier: keyid:11:48:9A:58:05:B7:FE:27:10:AE:32:C3:07:7C:34:50:57:9D:12:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11489A5805B7FE2710AE32C3077C3450579D1288.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:d3:52:19:fd:ea:a6:20:0a:11:d5:8b:16:bb:97:3d:f1:eb: 03:23:18:d6:a0:a5:3f:81:52:36:04:42:be:96:9f:47:7f:be: 31:e3:7f:40:02:03:89:aa:64:29:99:7d:a4:d8:06:b8:19:ef: fb:5a:33:80:c9:7f:0f:fe:b5:62:0b:96:81:90:b5:44:b8:ac: d2:2d:a0:58:7f:14:61:72:64:5b:1c:3e:f5:7a:12:4e:d5:37: 8d:62:63:17:d1:c3:01:2a:03:f1:2c:2c:e5:9c:69:ed:fb:88: ea:5d:c5:e7:91:a9:e4:6b:55:38:18:20:5b:9b:c2:e9:03:53: a5:8d:8d:80:93:e9:ad:2a:4b:4b:c2:0a:c7:ce:8b:4c:b1:0a: de:07:eb:e7:61:fc:12:1e:86:81:08:ce:fb:3f:96:8c:28:7f: 04:74:97:c0:8d:99:f4:28:b6:1b:b8:58:45:47:ed:38:f6:36: 0e:18:50:33:c7:3e:d4:b2:ea:48:bf:12:06:c5:01:7e:19:1a: d0:87:94:ea:e3:99:5a:99:59:4e:ca:4c:90:f6:82:80:6d:c6: 08:a1:cd:78:84:66:4a:44:83:63:ec:33:7d:1c:51:4e:cb:b9: 4f:38:60:de:60:45:98:39:35:04:5e:41:a0:26:9f:da:4a:91: 7d:5a:75:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL9pw7Tueivt254i+cEJDdau2IZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE0ODlBNTgwNUI3RkUyNzEwQUUzMkMzMDc3QzM0NTA1 NzlEMTI4ODAeFw0yNjAzMjUxOTM3MDNaFw0yNjAzMjgyMjQ0MDNaMDMxMTAvBgNV BAMTKDVFNjdCOTUwRDAxM0VCRDVGRDBFNTNGODc5REJFMUEzNDkxQkFBQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf9cN4Boo+lsfsAdDuQ0im6Htr zp2TvOJc4aEzijj1akWCyZRVr32fNQx5ynf5y2K5rA6SqgaFr3Q+04+FKl1wxrSd Cm/Qg7RNpYI1h3FsWvnjzKgijLwZjd3DcMPWk+Y9U7bk1K7z49zY9ucMBVJyFpuk JcUwTo6xttDo5wjl1JlU3Z6e5kUwLF4McAP7z0JYXND5B4P/NYHWahS3sRs3Rjyg bNrPNsJKVIf2eSe+54/hfdL1PuZvp1/geoR0EldDukfylu0rmewuMYoLRkUfJBAZ 4+cvjnFuMg4xpQQcKv8Jq9jUmoVUJa9dfqJkSjwnCCBWv8sCkhRwwXvaiqo5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXme5UNAT69X9DlP4edvho0kbqrQwHwYDVR0j BBgwFoAUEUiaWAW3/icQrjLDB3w0UFedEogwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWJjZTcxZS00ZWU0LTQ1OTAtOTRmYi0zN2ZmZDlmMGQ2YjcvMC8xMTQ4OUE1ODA1 QjdGRTI3MTBBRTMyQzMwNzdDMzQ1MDU3OUQxMjg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE0ODlBNTgwNUI3RkUyNzEwQUUzMkMzMDc3QzM0NTA1NzlE MTI4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFiY2U3MWUtNGVlNC00NTkwLTk0 ZmItMzdmZmQ5ZjBkNmI3LzAvMTE0ODlBNTgwNUI3RkUyNzEwQUUzMkMzMDc3QzM0 NTA1NzlEMTI4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACzTUhn96qYgChHVixa7lz3x6wMjGNagpT+B UjYEQr6Wn0d/vjHjf0ACA4mqZCmZfaTYBrgZ7/taM4DJfw/+tWILloGQtUS4rNIt oFh/FGFyZFscPvV6Ek7VN41iYxfRwwEqA/EsLOWcae37iOpdxeeRqeRrVTgYIFub wukDU6WNjYCT6a0qS0vCCsfOi0yxCt4H6+dh/BIehoEIzvs/lowofwR0l8CNmfQo thu4WEVH7Tj2Ng4YUDPHPtSy6ki/EgbFAX4ZGtCHlOrjmVqZWU7KTJD2goBtxgih zXiEZkpEg2PsM30cUU7LuU84YN5gRZg5NQReQaAmn9pKkX1adQQ= -----END CERTIFICATE-----Generated at Thu Mar 26 17:54:46 2026 by rpki-client